Description (CNA)
Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Square / Wire | affected 0 before 5.2.0 |
CWE
CWE-674
References
- https://github.com/square/wire/commit/b90e60c09befaff836a2fc2ee4d678451b2ec75d
- https://github.com/square/wire/compare/5.1.0...5.2.0
ADP enrichment
No English description supplied.
No references supplied.